ExePlot

Search for samples from various malware databases.

This library implements multiple plot types for illustrating executable samples. It currently supports the PE, ELF and Mach-O formats, relying on lief for abstracting them.

$ pip install exeplot

😎 Usage Examples

Draw a byte plot of calc_packed.exe:

$ exeplot byte calc_packed.exe

Draw a simplified byte plot of calc_packed.exe:

$ exeplot byte calc_packed.exe --no-title --no-legend

Draw a pie plot of calc_packed.exe:

$ exeplot pie calc_packed.exe

Draw a nested pie plot of calc_packed.exe:

$ exeplot nested_pie calc_packed.exe

Draw a stacked and scaled entropy plot of calc_orig.exe and calc_packed.exe:

$ exeplot entropy calc_orig.exe calc_packed.exe

Draw a simplified entropy plot of calc_packed.exe:

$ exeplot entropy calc_packed.exe --no-title --no-legend --no-label --no-entrypoint

👏 Supporters